Google Desktop loopholes and attacks

The obscure web-based attack vulnerability (called "anti-DNS pinning") may allow hackers to access any data that Google Desktop indexes. This is the second time. Within a week, the Google Desktop security vulnerability was mentioned.

Google's PC search software was 'flimsy' before the 'anti-DNS pinning' attack. According to security researchers, this type of attack could allow hackers to access any data indexed by Google Desktop.

This is the second time in a week, the Google Desktop security vulnerability is mentioned. On February 21, 2007, Watchfire researchers reported that a vulnerability could allow hackers to read files or run unauthorized software on systems running Google Desktop.

According to independent security researcher Robert Hansen (the first to discover this type of attack), hackers should first exploit the cross-site scripting vulnerability in the Google website. .com but the consequences are much more serious. He said, 'now all data on computers running Google Desktop could be' sucked 'into hackers' computers.

Mr. Hansen said, Google is not the only company hurt by web-based attacks. In early December 2006, MySpace.com has been spread by a worm in the MySpace community to steal login information and promote advertising websites.